DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-20 14:00:59 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1425 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (1425 bytes) ;; HEADER SECTION ;; id = 48724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to m.root-servers.net for PKI.GOV/A
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for PKI.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (665 bytes) ;; HEADER SECTION ;; id = 4801 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 24071 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 5539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190305050000 20190220040000 16749 . rFwD7Aald2hhezhQdF/ezutPyBdOsWTurltHooGXGUV77W0BsAtt0SCxSNMHJtys9aqobswpBSzM aJUSjaScTyVruowRFs0e8gQvRLwr0bqauauISZZYFkTjcD/Te6J08WajmcZVzAqvd8z5xVt7Stla VS7DSeAxZpRHKudpTcIdHWQxvujy8nmgEC1DEWBDggHmROGpGCPeqfgqbe+J8KEaRFj+kiyFxEXx aBCuZxqf5FkQT0mChhXfGyAOpPy7rrdQKOwWKup1Y/aNp85jicsnMBpkc2ojXoO4MT75/q3EDMHt Kw5x9J2teFA/sjtXbo/Dgffmro7eFoDAoosC1Q== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 26029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	Query to b.gov-servers.net for PKI.GOV/A
	Received 493 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (493 bytes) ;; HEADER SECTION ;; id = 13252 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. eMpK31xlaJ7QB5SbU9AOa5tu4KYPs6X1qeLOY5PKRoRNMrKqx+fuleerM3VqsrIh3VZsJxwreIIk fDkKBPlCk+wBMczgTyCb3f0S9jIWPs6U8dMP4wvjX2znfNyW7/3gP1TVFNexXXlJO8eR4sqvl/gK Gv2qTkRO2F/JCvD9K2c= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.gov-servers.net for PKI.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for PKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 493 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (493 bytes) ;; HEADER SECTION ;; id = 58220 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. eMpK31xlaJ7QB5SbU9AOa5tu4KYPs6X1qeLOY5PKRoRNMrKqx+fuleerM3VqsrIh3VZsJxwreIIk fDkKBPlCk+wBMczgTyCb3f0S9jIWPs6U8dMP4wvjX2znfNyW7/3gP1TVFNexXXlJO8eR4sqvl/gK Gv2qTkRO2F/JCvD9K2c= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone PKI.GOV

PKI.GOV

	Checking DS between GOV and PKI.GOV
	Query to b.gov-servers.net for PKI.GOV/DS
	Received 367 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (367 bytes) ;; HEADER SECTION ;; id = 25015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DS ;; ANSWER SECTION (5 records) PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. eMpK31xlaJ7QB5SbU9AOa5tu4KYPs6X1qeLOY5PKRoRNMrKqx+fuleerM3VqsrIh3VZsJxwreIIk fDkKBPlCk+wBMczgTyCb3f0S9jIWPs6U8dMP4wvjX2znfNyW7/3gP1TVFNexXXlJO8eR4sqvl/gK Gv2qTkRO2F/JCvD9K2c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for PKI.GOV in the GOV zone
	DS=23245/SHA-1 has algorithm RSASHA256
	DS=23245/SHA-256 has algorithm RSASHA256
	DS=55612/SHA-1 has algorithm RSASHA256
	DS=55612/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227101006 20190220101006 28157 gov. eMpK31xlaJ7QB5SbU9AOa5tu4KYPs6X1qeLOY5PKRoRNMrKqx+fuleerM3VqsrIh3VZsJxwreIIk fDkKBPlCk+wBMczgTyCb3f0S9jIWPs6U8dMP4wvjX2znfNyW7/3gP1TVFNexXXlJO8eR4sqvl/gK Gv2qTkRO2F/JCvD9K2c= )`
	RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
	DS=23245/SHA-1 is now in the chain-of-trust
	DS=55612/SHA-1 is now in the chain-of-trust
	`PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2`
	`PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 )`
	`PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791`
	`PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 )`
	Query to dns1.PKI.GOV for PKI.GOV/DNSKEY
	Received 2320 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2320 bytes) ;; HEADER SECTION ;; id = 14784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc23ilyXKQStNLihdjXo6JqtPYyftWZT6pjS/URG0OPmBN2hd1Lm4kauwVNjwmGblKQn2+XF U9w0Woj0x2aaxyS0oNV0lDzW1C3qzfNP0EV3raz3cQaxybywi+McQrOtq8aNfUx8B36eSA0DCitq /vGpegSj6gvxb6N4ARpir3VmUWGJ+7JLiEcv84Sm+yrH3AbnwVi1bjQTaTYSTTqAuXDIRG2ud1nI RVj5YKI54bqrX2IlWjzVgu0WLxXPsUBsmCVHYxei+ar3yiuspqlRisK6R8Ypv1iYZh+27xXWA3l+ jzjvnvELMkqAw+Fm2/5Xjoo9tVTZ+UivG+M8wHipNXU= ) ; Key ID = 49518 PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdisSGNUg58L/5qTmMCdmOL74i5GO4iwbeNHfBESMIul2B9T3mqcPuAAA0F8VnPfN3ls/crF dATspNuw9npnEbuMM8uuyF+qwIC5ksJ3zZQwYjiR0Q4Fp/XRhl9YdoGgv3ZjKhTrK0ugj/VJCxHJ 6MpH8FX4mKypROmy6Fs1/2wHSNBVtaZxgzohVh2WXcc7493nCRR3xiLlrO9GnRWxee8JTYT/SU/L ZJgt84Jh9/4dHsmw/LN1vfQUWyqpW/5lsDMutV9gBJZ+Ubtf39a9CB0qjJ0ts7Dv9/DKYKVjlP4r JIlcX/1ncwVsD9DENIBxwAqmQhXzAdyhhGN5m7ppft8= ) ; Key ID = 37818 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbV34PXpVZ82jZoA7+MPoD1U+IP6KsD4OcycHamdD0Jf/WAos1s/xAbmGXzzOl2CgtayxxKp /nEFY8N1YJsV8DUUyV1GW6GtNsXaLQnG045Z5B/IbJtn9NwPXAAzSyYRr8V7CRlIfIwTnjPhcR0K CoW9X+uLJqUH6S3XQ792057zU1GnzMRPVVpnBTMaKnzMZRqwsEORukD/2xbrQVkZycftC/JCaPSR lHyyrQcj8IoyByYWJc8gi5tsS9k1S8iJHgzp+t60EI04/poIfkn+PnULNLmBFOpAdOgpvD93JsJn 7jhZ6nJ8XZUVwvEoqkAynwkCMaiTp08zfy2kdyxamNs= ) ; Key ID = 55612 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZEnNk1nNHzYqxAA9j2D6pjYhaToz/Z2bwjvGnn9m1N7V+qUjqvd2YUzroD1o8g7U6ZDkQJV tFr4CeLq0rdExqGhrA4+7XTWaV+h6K2sXtvXkIATlo1efabYlTo6ZrWiBVTaehzhZb1otKABiuYm 27H6K2XMOjfrrAcPkYoGpKqXktw8sQZDKYzJ/94mqqzA9K0S9yUrXYzRr1c7ysI01uRIhJ/CGja6 6PdrOJRLOPv3zdqFCBMWDZubxNQHCj/Bb2b9/X5OyPtYuFaiRNuC+YsSFeKBWybcXLFLzPspULmL 6VJ+/NoE3cWzItCx1E0849nj8BONkAyfC3HdtAKfLy8= ) ; Key ID = 23245 PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 49518 pki.gov. bww8cSqDwjKuHPSn1pIGFe4jZ5RSZubniiN837Tjbjz1+nsU82wYmazOamdR+aasW5IkG88+RykI 7COmLghGc1sp7GTuoNf2QrZqwrGIFG/Z/y3dOOmOK7dZvsbjTD71TZ3mXb2PID/twepKFpY9XTNM 5ZkWOvt+OKQxDwys4bTbdxXbLOpRhzLHVCCQgCUMn1En3/HQ3TI7lB/Wzp7IZYtfkK4mMfsiidfs 0vtxOVMTHwrWAiQE7ErkcuVfTtqKtGMRPzP2itj+n6/rRjdT+5/w+ai7hZ5YWOMFZECJDSiVmYL9 FyNj7gw36rLI1MZ7JvGBJfnr6dgjzoNtYwTlgQ== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 37818 pki.gov. NzGJNuugzrsl0/WJb32mRmZoT5AF5//au3SutksPzF4BPUkeDpoeVShMak657BIlbEIEsq+3k9cE cE91W53G4pRZKbVbzMZtZt5rx7kes0wVrkxsKBEs7yMKTdVWaaswvNt1I9EkacKJjYA6+7gtQAuK /VBcNQBmWGF+iAPnXZ6EQ4bny82xaILfKk4FFpx6SlJMhXX+6BaclKB1oR96e8sC1XT2AoLdvaKB hFpfCU3BUxiaiiYuuyOLX6dC87r7TRy2ChBEzzm6FU7gy/VW2rmXyxyxCEDCNw5sS+YPEiPaswV0 pLNIxxoqt4XBGg6i53pPAaWCu+sIxkjS/uTryw== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 55612 pki.gov. ptQEB6XApr19EuxsetQh71Ilz6PqZgf1P14u/jWuUndFAlH8ScwDkbSzv8pCuuIqDaaFjKIl4hY8 r8FyAgQeEKd2fKFeJgtkbmCdJbR9bnCqzE0oekSjYYpxhYS7kabfGPPOCEQiesKcBsfhBdIX6tVJ WaMGrpY4ygsDRbmTah0xNRBy+oOzVz68uJ6LmbFLPlr+KxnLcF1B3PsFfzTPrIjOkVbM9VvQmYez cefM5moYESpYem9+cocNZHKovl5+tAUHCH2yHzmekpaodUK8qCfpOL/jcPEWgSsWK23wPFW3k1Wa /CRJSu2F1q2RpremxQNP9410jV8Nhs8LipAw7Q== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 23245 pki.gov. AN6UhkP7HLyTHXZzbYBj9l3K0aAotGHQvwQQrZc5uLPiJebuIwErSSjIG2Un4ylVHEJF+Jo95pXH JKyxMnqwWTHLjjZn95hA1I8jF/tUuD91DmqBp56LjcNqDITm44ppTXV+AW6QHe5ND3BZxkILrCDC u0Tgis/Xq+LHm2PBmuyMHVQG/VBRLFHsgHwmtwiM5ObZUFyMQa8aJ+YI164I9U8fBr8jpD2wgDtY fCbm/YcXgZKRgSrVZlN12H9wXGzO1uxIfbPExTTrkmwA9xbhXTo3gycDxr+Q2HkGxLAMbOC1ivTN 00nuHMaBE6hKW6ULDK3CdT/XYqWTX/l98qqumw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI.GOV
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc23ilyXKQStNLihdjXo6JqtPYyftWZT6pjS/URG0OPmBN2hd1Lm4kauwVNjwmGblKQn2+XF U9w0Woj0x2aaxyS0oNV0lDzW1C3qzfNP0EV3raz3cQaxybywi+McQrOtq8aNfUx8B36eSA0DCitq /vGpegSj6gvxb6N4ARpir3VmUWGJ+7JLiEcv84Sm+yrH3AbnwVi1bjQTaTYSTTqAuXDIRG2ud1nI RVj5YKI54bqrX2IlWjzVgu0WLxXPsUBsmCVHYxei+ar3yiuspqlRisK6R8Ypv1iYZh+27xXWA3l+ jzjvnvELMkqAw+Fm2/5Xjoo9tVTZ+UivG+M8wHipNXU= ) ; Key ID = 49518`
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdisSGNUg58L/5qTmMCdmOL74i5GO4iwbeNHfBESMIul2B9T3mqcPuAAA0F8VnPfN3ls/crF dATspNuw9npnEbuMM8uuyF+qwIC5ksJ3zZQwYjiR0Q4Fp/XRhl9YdoGgv3ZjKhTrK0ugj/VJCxHJ 6MpH8FX4mKypROmy6Fs1/2wHSNBVtaZxgzohVh2WXcc7493nCRR3xiLlrO9GnRWxee8JTYT/SU/L ZJgt84Jh9/4dHsmw/LN1vfQUWyqpW/5lsDMutV9gBJZ+Ubtf39a9CB0qjJ0ts7Dv9/DKYKVjlP4r JIlcX/1ncwVsD9DENIBxwAqmQhXzAdyhhGN5m7ppft8= ) ; Key ID = 37818`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbV34PXpVZ82jZoA7+MPoD1U+IP6KsD4OcycHamdD0Jf/WAos1s/xAbmGXzzOl2CgtayxxKp /nEFY8N1YJsV8DUUyV1GW6GtNsXaLQnG045Z5B/IbJtn9NwPXAAzSyYRr8V7CRlIfIwTnjPhcR0K CoW9X+uLJqUH6S3XQ792057zU1GnzMRPVVpnBTMaKnzMZRqwsEORukD/2xbrQVkZycftC/JCaPSR lHyyrQcj8IoyByYWJc8gi5tsS9k1S8iJHgzp+t60EI04/poIfkn+PnULNLmBFOpAdOgpvD93JsJn 7jhZ6nJ8XZUVwvEoqkAynwkCMaiTp08zfy2kdyxamNs= ) ; Key ID = 55612`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZEnNk1nNHzYqxAA9j2D6pjYhaToz/Z2bwjvGnn9m1N7V+qUjqvd2YUzroD1o8g7U6ZDkQJV tFr4CeLq0rdExqGhrA4+7XTWaV+h6K2sXtvXkIATlo1efabYlTo6ZrWiBVTaehzhZb1otKABiuYm 27H6K2XMOjfrrAcPkYoGpKqXktw8sQZDKYzJ/94mqqzA9K0S9yUrXYzRr1c7ysI01uRIhJ/CGja6 6PdrOJRLOPv3zdqFCBMWDZubxNQHCj/Bb2b9/X5OyPtYuFaiRNuC+YsSFeKBWybcXLFLzPspULmL 6VJ+/NoE3cWzItCx1E0849nj8BONkAyfC3HdtAKfLy8= ) ; Key ID = 23245`
	DNSKEY=55612/SEP is now in the chain-of-trust
	DS=55612/SHA-1 verifies DNSKEY=55612/SEP
	DS=55612/SHA-256 verifies DNSKEY=55612/SEP
	DNSKEY=23245/SEP is now in the chain-of-trust
	DS=23245/SHA-1 verifies DNSKEY=23245/SEP
	DS=23245/SHA-256 verifies DNSKEY=23245/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 49518 pki.gov. bww8cSqDwjKuHPSn1pIGFe4jZ5RSZubniiN837Tjbjz1+nsU82wYmazOamdR+aasW5IkG88+RykI 7COmLghGc1sp7GTuoNf2QrZqwrGIFG/Z/y3dOOmOK7dZvsbjTD71TZ3mXb2PID/twepKFpY9XTNM 5ZkWOvt+OKQxDwys4bTbdxXbLOpRhzLHVCCQgCUMn1En3/HQ3TI7lB/Wzp7IZYtfkK4mMfsiidfs 0vtxOVMTHwrWAiQE7ErkcuVfTtqKtGMRPzP2itj+n6/rRjdT+5/w+ai7hZ5YWOMFZECJDSiVmYL9 FyNj7gw36rLI1MZ7JvGBJfnr6dgjzoNtYwTlgQ== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 37818 pki.gov. NzGJNuugzrsl0/WJb32mRmZoT5AF5//au3SutksPzF4BPUkeDpoeVShMak657BIlbEIEsq+3k9cE cE91W53G4pRZKbVbzMZtZt5rx7kes0wVrkxsKBEs7yMKTdVWaaswvNt1I9EkacKJjYA6+7gtQAuK /VBcNQBmWGF+iAPnXZ6EQ4bny82xaILfKk4FFpx6SlJMhXX+6BaclKB1oR96e8sC1XT2AoLdvaKB hFpfCU3BUxiaiiYuuyOLX6dC87r7TRy2ChBEzzm6FU7gy/VW2rmXyxyxCEDCNw5sS+YPEiPaswV0 pLNIxxoqt4XBGg6i53pPAaWCu+sIxkjS/uTryw== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 55612 pki.gov. ptQEB6XApr19EuxsetQh71Ilz6PqZgf1P14u/jWuUndFAlH8ScwDkbSzv8pCuuIqDaaFjKIl4hY8 r8FyAgQeEKd2fKFeJgtkbmCdJbR9bnCqzE0oekSjYYpxhYS7kabfGPPOCEQiesKcBsfhBdIX6tVJ WaMGrpY4ygsDRbmTah0xNRBy+oOzVz68uJ6LmbFLPlr+KxnLcF1B3PsFfzTPrIjOkVbM9VvQmYez cefM5moYESpYem9+cocNZHKovl5+tAUHCH2yHzmekpaodUK8qCfpOL/jcPEWgSsWK23wPFW3k1Wa /CRJSu2F1q2RpremxQNP9410jV8Nhs8LipAw7Q== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227023019 20190220023019 23245 pki.gov. AN6UhkP7HLyTHXZzbYBj9l3K0aAotGHQvwQQrZc5uLPiJebuIwErSSjIG2Un4ylVHEJF+Jo95pXH JKyxMnqwWTHLjjZn95hA1I8jF/tUuD91DmqBp56LjcNqDITm44ppTXV+AW6QHe5ND3BZxkILrCDC u0Tgis/Xq+LHm2PBmuyMHVQG/VBRLFHsgHwmtwiM5ObZUFyMQa8aJ+YI164I9U8fBr8jpD2wgDtY fCbm/YcXgZKRgSrVZlN12H9wXGzO1uxIfbPExTTrkmwA9xbhXTo3gycDxr+Q2HkGxLAMbOC1ivTN 00nuHMaBE6hKW6ULDK3CdT/XYqWTX/l98qqumw== )`
	RRSIG=49518 and DNSKEY=49518 verifies the DNSKEY RRset
	RRSIG=37818 and DNSKEY=37818 verifies the DNSKEY RRset
	RRSIG=55612 and DNSKEY=55612/SEP verifies the DNSKEY RRset
	RRSIG=23245 and DNSKEY=23245/SEP verifies the DNSKEY RRset
	DNSKEY=49518 is now in the chain-of-trust
	DNSKEY=37818 is now in the chain-of-trust
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 40274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190226072914 20190219072914 49518 pki.gov. noo4kh4zkQsaMnMzcRMg1D0/eSVVEE+KZIntZ9EwAYliVpgMGST+ZPhlqNChDaUVhCsoELFRisuB k/xEJqfOqT6zbXDs+RCPP0vAZ8GE/5OjSPxjBptYo3Z+SJFo4HtsQBBfyqYeHQOiJ4c3janDHEqj RCxJK69+CRAoOmkKVHTmJKIaMoZ9qjaWbx8QyO0ct4bL1dv2TMEPj4heHZQScJsjUQS3tfpKCnlV Y1de6nWjbDh/YwCHUX8h4qU9UsssLuhzCQikLyxpk8vd/lMPN5At00KfF38V1JjtIDIcAFUk0/Ov u6iO9YLOVPo4xididMPuuiPeDj6xJ7x/wxJqAg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190227013118 20190220013118 37818 pki.gov. lJ1zGSmcrn0FQFFRMV/ly2X/RwjPrVBzoPPNQca1bHzZCb1L02UtxigGcDXmvCjpN1e+/KtRxzIq ZPoragh1vrw56pyiQE0mU9lc3NhfW8L1LZW4NTGJMA/Eegoh8sNjssRrNhDs8hnvkGyiJ4ZMuaok xeZUybdl97w+8UjqbhChErXEk1A6LnYxnKGYAdDvzBe/jlwu/CBz5F7djE59MktfhOIDnW2Yew7s rP/rLA+JBRDA7axPx02JS83tQT9hPr0KwQcEDlTe8oWz2+m+6eSDmvmkbARCMqF1jd+ZPGId88jg pbdKBuMPmhkpNqEdT7pLk2J8BVkkJYaj4XdaYw== ) 1bi4b8bckl35odl1bvs95jckdsplaqtg.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 6461602509683a89 1bi4b8bckl35odl1bvs95jckdsplaqth NS SOA RRSIG DNSKEY NSEC3PARAM ) 1bi4b8bckl35odl1bvs95jckdsplaqtg.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190226072914 20190219072914 49518 pki.gov. DyPxqowFm7i6zj3+8OodPA/E6PfT/KAKJ9/QrCt1ocEuXCMLUfMM9NBCSi7QV8zAfTTLywsYwc5Z rBtumd+uCENV7yVXJieYHXjp6+czsINAfY/bj8HSKTP2emhI4RsIDX1TH0ErP/DZ13eiu8RJXyUd SX2BMo76F1ii6U9bEz8xXV1jwmAuHehXdY7o0xUwPQ2OHlUiPLa6gqjiYhFSw79oG6klAdROBGYc sSGEIvTl9+DFWshuNvZ3ZQb+pg8R3Wf9qB31KGnB1fiXQRcmDAnEeyIXaDT53jHkyamO4xNmRCSA CNAyeFf2x0yo7UkoB4tPzSjIMpXSo+aiYCBXYw== ) 1bi4b8bckl35odl1bvs95jckdsplaqtg.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190227013118 20190220013118 37818 pki.gov. D+Kqhui10hTkpyRW1a/5uWix6r/qRVXwM75+bcU5TcJM5zbOVUYVBuPe6Gwleur/sPOBl8yhNoAb 4OJBnP5IA6GtnHleC/aRxyVWL+wV9u6pDc+f6KKyXgdCPazlrzwSbSRNQhLktMHcdbl6T9ZCoyb2 Qg8XCoyvA4JCN/CkAia2nX0aRnjkDgCctz5E7xek3m8gubCjlA00EzHgQh9HWu0kVtgMzGjvNpBS lRw1neIw3ztg+pv26hUJpy3WgixqM7EWScKY6rgXfHirhZUGnDmKBVJE5zzDMbsdp7qOUPAJ1TIR qmHolit53CpAEYZPiN6TVUVEvJV250aVLCCWng== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI.GOV is authoritative for PKI.GOV
	Found RRSIG signed by pki.gov zone
	Query to dns2.PKI.GOV for PKI.GOV/SOA
	Received 3749 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3749 bytes) ;; HEADER SECTION ;; id = 35412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190226072914 20190219072914 49518 pki.gov. noo4kh4zkQsaMnMzcRMg1D0/eSVVEE+KZIntZ9EwAYliVpgMGST+ZPhlqNChDaUVhCsoELFRisuB k/xEJqfOqT6zbXDs+RCPP0vAZ8GE/5OjSPxjBptYo3Z+SJFo4HtsQBBfyqYeHQOiJ4c3janDHEqj RCxJK69+CRAoOmkKVHTmJKIaMoZ9qjaWbx8QyO0ct4bL1dv2TMEPj4heHZQScJsjUQS3tfpKCnlV Y1de6nWjbDh/YwCHUX8h4qU9UsssLuhzCQikLyxpk8vd/lMPN5At00KfF38V1JjtIDIcAFUk0/Ov u6iO9YLOVPo4xididMPuuiPeDj6xJ7x/wxJqAg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190227013118 20190220013118 37818 pki.gov. lJ1zGSmcrn0FQFFRMV/ly2X/RwjPrVBzoPPNQca1bHzZCb1L02UtxigGcDXmvCjpN1e+/KtRxzIq ZPoragh1vrw56pyiQE0mU9lc3NhfW8L1LZW4NTGJMA/Eegoh8sNjssRrNhDs8hnvkGyiJ4ZMuaok xeZUybdl97w+8UjqbhChErXEk1A6LnYxnKGYAdDvzBe/jlwu/CBz5F7djE59MktfhOIDnW2Yew7s rP/rLA+JBRDA7axPx02JS83tQT9hPr0KwQcEDlTe8oWz2+m+6eSDmvmkbARCMqF1jd+ZPGId88jg pbdKBuMPmhkpNqEdT7pLk2J8BVkkJYaj4XdaYw== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190226134049 20190219134049 49518 pki.gov. fktTFmEWoW9kV8p0LOvQ10UzLF8qB9QyEbnuTaCWGhYTmk2Vzns+6RaAYMm/O8twg0b80P9Qd4Qj t0B+jKhGRFMPLh2f6sz4Zel7YQ7RurlyoPOBRyZcBF5oSuzgyDi0N6O4OmixT9Q4Irfk9mkjrght eFnnni2BLACmWUGMUhNFgyV7qa/BTQXAKtKKQCR26WZCwIkcy+6js+FWoOvnphg63oTxADnWDByK /lPDUeGqojbWn8raYXg+nRC/kP+6iruLoGEFCM9bKf6tdFqTI2B/29ICmZ3ArZIKbK38kwcEAguR QQ61adBC356ctwDmzvfqWpXqrwChvDyy4/rJBg== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190227051310 20190220051310 37818 pki.gov. gDlhJ1Mr4RVXe3EwdIi+sG1i6x4Yrd3pUzM46BNmBz4Z5w5sp1EyAMyB8r9Bd8QlSycAK4Fw8J2q KJTpsFUvsI82sjMG1sX3DPyNi3pbAO8U+tYu7xkCPah+7/bY2Bvl+SVLsU/SE64OUtiJnWwA0IOf dZTMkJIIb6fWfvKKeaALggryJ52ypkUTEeijKuVDlFMhkc/9N1Feoc/nbj/7Bwvwgnu8BTryVU0w Umqp5JD5A3Krm6PDKTM6wmZAUOXqnj1CMSAx6AbAv1YV7eZlzaGOIFKmEj5HM1PnZjSeU7lmr4xz GwfuaVtee0aKTsxVDtW0LXooc3tDRN6jnaunlw== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190226134049 20190219134049 49518 pki.gov. gxFBqeLFxU6P9/24yUUE6ZYQSV0zTnV85b4lXAAdsi1Hr1hzCVv+5eupqKAghJWfs+zDURZweKZ3 zwM0NkZhkeN6Gkdik4jKXAhNvexu0wQbI+ka6G3Y2RNLIM2d9fb1oLvlD72frtfX6LLZ5Ob51AKy DSEn9X2uINrvtVFeR3E+dHDqXgcUMXl93F4zDUzkeFF1grKRH4FPHUaJOtuLO6nu0NHXuCRqGB74 GstoRxz9fC24MhMmRu8g2CWX42dJvVvlmforLjFbMWhS2x3vDArjEirz6aYGF4+GJs59/IcoXucQ eDxyODSXnAA9XPPfaiUt3dcv7+qvllemeMhaGQ== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190227051310 20190220051310 37818 pki.gov. SvCgb1qTrtRqqT4f+7akONwyFfnB4SbszcqKO+UWcfpY24QwWDLt9xD1ja7vaWrHms7TIHd+7CIS gNnXWM+r8r5KBCWI+1U0EpROO/f1j/xLUSkzGsAYwV9F7Tb7u7z4CIJdBvet6HoKtJn3F+299erx xS6XBD/Va0aA5BAKylLU8fvehTJPtYkL3xoOJwr7p83lcA89aW/2xKlCcw9BRxE5bYPKNVjndC3F lMdkhhqVNexBSTlRDMFq3BnFB0N9s1BUq/iyO3r2Xq+ssleolj5YSCH/xOfzBo7h1x+MoAgEzNQj ccLqWm8KpGKP+bzRoHhvdcvPftpcmgtR6TvI4g== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190226134049 20190219134049 49518 pki.gov. s6/mCn4siuolNfvoD+74xu7z+nHctQa77O4TitzZN7WiGeUEmlN4N8U7Sn8PR8qXKPje7FaJGqYO TSIHAdlLrHOf3uqPB6daXBXo2Fag1irKV9Ym2u7GaIWL7uJdjhQru5xRDzElretuBP5J6/05XXLF nO+nrth2YOqXnLPxmtg9qPkTOCiDYVl9rtdQ8yZ7Veop3OzqEvSD4Chh7LqW7Xn0dCSmVvqPpJcA DJv8q+BsuofnbZqj2mMxPSMHJEKDsV2DDBWFQ/EHBG7F4Qv6L0WVi8CygCAGwuHyohLYS1Mk115Y HpqMKJsBwXiMdfcwrdxM3RIg7SQ6WwPEXcdwJg== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190227051310 20190220051310 37818 pki.gov. QGEvbmCI9ChRNQQtLHzSHEY2daeKDnQgF20ieoxK2wLJN3DmR07t/WvYLBsd4kM4z6C35UGLowkw XsCjIJNHXwBjcaYJe/OuthYzLbDBPVipLkwOyV/O2uoujczn2Ck9aYWWctM6/1QW7TMx/GxTMBAj 7/8hqoRZ2rNaiwgniMEWTAFlR8PWLj/3C7WNfweEzjbzVPg28xWPqczpSufhMaTh0M45MfK5sgBu 39ufjaSseDitr8iCqt7U10tOM9/Ad9Oi/s+4K61SG6zW6ypxX+Y8aavfW8+2ZR8eAUV7SCaC3b2T wq1V04/GNihKl604z2F+tbdGxtDe3wnx1VjF3g== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190226134049 20190219134049 49518 pki.gov. ukSLp/HibjWPNx7T5tJsr34ZcNJrCGTtCov40oIAEsTPqEHGOlrM+yHOEK4RpcrBQ3K4PvwYNJi+ F2W0vMIBaGG85PyhU4hBH878JIUheYP2xhrJJDeMQf7h556btlK3vceiKg66VMKpiEUUD1dD03fo K5fRBafCAw8u7wekX3dGr3M3UWLt8ckSBBBSICz22GDMf6zAjsUMcF56n4iG19LfT8O8zW6aCZqn 1+O64uKL+qsWpI8ZyEdSY/3lFMjKz31B8c4JKt72ZgGpkXJqR0tAIPW9Wv60sDzbQbIoxrYEiJBo pm8LEUAaM3QK1GlfOLUHUJjMXoGIopDQ9rQrdw== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190227051310 20190220051310 37818 pki.gov. kb0EbJtJq68xtliSCtIyJm/JdDRFRrYsz4SZzRnH6zcr7nQGfhpvEGiXB441qz3i1IuEQsyHDXg4 gEWUpySq8UtYf7QStH6YScdj9Nyb8Yo+QB6/RC4sPHkDzTwTzWWsOPHqj45phdH/OBIa+j0liTKf hh/1kEQtQ8Qt9qh+SUkvW29v2yvG8qIVJbxXEY+YK/UO3R5sUwWKi64WMGNeZGGaAg4xbOFW4WqQ +Ulo4rZHQudkjg4VE+0oddG4sM+41nmcJ1eTSpb53E1kSM/Mx5e5rKctHRz1s4O2w1CpZzzziOik buEOa0OH89QbPrJ6+rHIP1FKeHOqWxAqgn7qXw== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190226134049 20190219134049 49518 pki.gov. vpinPLjwlJDR+P1xM99Ez5ZOPjyAtCAgtQ0YCHor8eqVZMN6ue+Bu4moLSUDVYh3lCuSq3/+HRio GEXWQmOpMRu4/qIVt3IkLFaMNKmkNHqnXUN5nkzl6JCcH1LxigmfBsnL4a2aAmqSSVW3B0HHSX/Q A64kF+FqOmMUHNfs8Y/q+NpSaPg1cpTEqfK15SgDgBHQpTA7VkdIw3bUSFLaPFD6ThLeyQRLXqRP X2zOe5uTDYhtCRBxIr47xDm8dfHs4wtAk4Jwxp/rqP8HXu2henJVkcJY3zTmHXgbOEFW/c/60K3H lvg94Fg+I2dm4B54k+nf67Nwjb9f+MhmyuPvyg== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190227051310 20190220051310 37818 pki.gov. gGCNfcWZw8cfVxOEzJf5morJ3+ty90GMPFiynNp82NPZfly7VrOt645kz14evwKOXELolUNy4oD4 tsjUqe+oaR4ijWX7QkXAaBPL0JFDgR6wg/NF78r61kI1tTESt51z9oxDmo6T3L4fCW4u0+k8sIjD 2iMKAJo30EZsM0UrZho4oq2xxjgf9bwvdmXbFn7spwEQiZ4qySz1r9nynbOQyQSySw79bO5fJnvN VcCaxtM7KIsTtiEfhHbMM9jBnK7GHhKOQ4lI2/mFpNv9zCCYAPPNhJKpbVNpdIsmrm6NmlD6R/5J i8HEGA/R8uOCzsA7tup7ZdL+rIV/rPg0w8MeVg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.PKI.GOV for PKI.GOV/SOA
	Error querying dns1.PKI.GOV/2620:9b:c000:9200:12:0:0:30 for PKI.GOV/SOA: 'IPv6 transport disabled'
	Received 3749 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3749 bytes) ;; HEADER SECTION ;; id = 22351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190224083147 20190217083147 49518 pki.gov. x5XhuvuwZj6MHFciRr1D9DBPH1ZydwR6YzlZ1w6GjJ3HZiwsJ95T8XxRhMlyO0eYqBCVTZBd+Bt4 YtKGapEcC866qPVM3KQhd6qpRWMk82zWRhz2zCeNJ1okSglpzOwg29fmc0/sXAWDwX9BHY0EZTlD OiwZQL59kgUkaMJM61LsbkT2SplM1mMW/9OF7gDCGT5erJo9CEu1vA/7cTQMcWphRysrwiziuFYI +ZxCayaxW1MREZ4VEZoArJ683ev3i74N/MBk4pAIyi6I4AD66FyAsUs+ERy6Rv1RZp3JY+pkqPC+ qiRgmM/s+4g/yrweDRM/xKX9ZNVl1A8EEolW/A== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190227013448 20190220013448 37818 pki.gov. OiyDTtDPSS79WW/k9RtYmM8Wx2y31TD/pz77sopW3ZnP0Dot2iIwrm3H9BJ+R/+XjupG5BkAvj3b +hZFcdm5U3X4AUeCKvSTW6PzMu4+E2o3w4z6Y6BNFfHtQ9Hoxqc7U0brKLRlBym4/B+sTvTyjSCQ stLichf3+TvtJm+Bz+JXUCsYcxaUb7wywOeLvi2+7yZWrfMAJS2nuTY4p0igHu8JPSMc2VW3mGmf GEtG1wP9Ju1ynp5NUJ/KcmAlx6Ww9zP7uOay5OMiLxiLxEAiJWeMcwjVS8qUkguNYkfr/39FHT6W EqGQ00BAcRTLkpIe9L4md/AyeHkO6kfjJZsqOQ== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190224161753 20190217161753 49518 pki.gov. yO1Z+0oiNilGJuXUwghXHGjkhV1Z4fUY3o+VCD6QnCmcSwzpRRRiNbOwIeBQ2cgmYwtdXHwt2B3/ vfXSyy6Ihzy9aGZU2DYCcpFNGQauC3BE6+KGbyGgOz0ntqkywFdNtoFANBkOVtYTRn/QHorJoXIz jPie4+QGkoqiFr3Fdba2xNxdyqrSwnpLlkAI9c/0cSeouhCRjAnaeHWyC+5M78GJ2kvOlp026KYn Jo94auHoZFfFZYgKwP0yZtXF7DHwGX0N7WjLwqS7pNWeunomr5ORaov9Edeo11IlglIOxSE8whRS Mz3mm4ADWj4RL9YHSFQfEILBBYeTK7/XtkdFKQ== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190227051827 20190220051827 37818 pki.gov. e99LSBu24NW5Y8diul1fhexolL+zLFJ+GRHyoAqV2yCoeYQnqR0yCaiB5Pxu3vtOGi0umuG9MLkj ExnfSeH9wRtCGLWpSm5QUv8jUeXzM1oNNm5fqbGwKUlBPRymchQChatibePk3iTDoozrwIWEaFPq ILWxJnvWk/7E2jZnG4Oli21VJy1qRjErI1Xon/3FyKqaTi0qokY65BDXfLA/SAcjg9PIRphYcltK 5eaIP77XtoNH8RCotpaNi/tijTyGOvDe5SnHnVHen0JP2jd8Ln4oor1m8d/TGDPtekxQ8mIa+pcr qCw/RaL52fkjaNBg630gV5uZit7Ro0Nt3JXd5g== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190224161753 20190217161753 49518 pki.gov. NJjW9p20FjnqaA9xzLqKG7wEjVU5m5TdCsW2n3ETBPOITuSqerO0oWnUE1qHf/uW+Zv98kUhRkMO J3knojIExH7vTAM3H57Zed8Awgff1tEt/QXXTlEUWE4cyjcOANguKLeMuMgA5HRoN/W9CDg64krw gHSC7i79aa6rc3eh7D10Eo0sxPjPnNATPpZZ0HDAof77nYZcF/t78KFTAFsTAicIAzXgN8KfkXEL 9jFickP7OjXmlYkK+VTSnF/Alaew93L4sSS2MCWbhyIAVzB6hT9LI8yA23O4cnaqrwgNj52yV0vx ckXBUyltNG8ZV4RE0Gh/cpoMKYI4XjMWtn3oMQ== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190227051827 20190220051827 37818 pki.gov. lQ160X5VVk4oUblcC0GGDOMGKXK6hvZ/SSu3ZgwrkTUNySqOZHGss+GZx5C9AM/0mpN1cICiM4nb fhEpH45Zy87YAvWQ+Vvri29mCqP5LgvCjzTeUCdf6Ci6g8K5zlRUHqL3KT+jc/+ITDwckWHxUdsl 5FPh76uRowa/QNtMovOdnCJ3b+dTlwTCFilLPXQRtwCC+cqIc1DXbEY39tyNrG+DaY/sZnIMyYj7 g8gTEUSt9bWqLK3Eqqa3E+SOEWcAhslz45+vdtDiXO67y0eiQaC05xYbK/ieZ/j5UiyVyNYvf983 YqIw+GBIlll86JmpaJe18phWyU7o/iMVHQvEZg== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190224161753 20190217161753 49518 pki.gov. IqU06/6JPKlKMkZA3hn6CIvIIb4C6e4+v08E3e6MM/di+xaOZJaWe5RdIn83SmV5H/6qy4kAwIuQ piiKZTAimQ68JZH/FiA/2jlD1kIOPvCsrtAGkO7aebPQZ5+3V8woRa3zZE5JXWpvVUiFAlm8ju8S M+3MkxKKDB+pogfIlIirokoJbGidS81LgpQr+D1HIdeKTsLlSDBprTj7qRJUepw0FD4CG/qwHpl4 Xn7ht+6SRh0utl+czTFFhBCh2qMZ2ZgvfTF/OUOMgQBQxIzaGmV3Mn2+qz+IAltbC8dpd9cIz3M3 6aHNQ7bZ1XYAumzoBwbYYNXeHGkb48aCqBXfOQ== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190227051827 20190220051827 37818 pki.gov. LNiP+z2uJd8HIVnWr6OEtHBk7CACH3gxkuOBevQHMhbqBA6YslKCb+DSTEUJOZ0Zp3TkF4fuOXJo wf8p19NsYbTnZUzFBXc2CEz168EplCHQJy5VVwnEVA2G+WB+HR4rZnATtXL/QZNwW++Fo2FwFWvz 4b+7e5uO85z+T2FX55nLatrxBrGgaHfPD68qBPv5sdsLwjrZ9DDSi9xJkBxDlfOuyn4MGKatj/0G sTHR9gAt3qtxXpvwxrxjp6tj2qJQ31AY5Q0aasIegFFgaLOPG/umrWlatCogS0aFmzWpibrx8x4a tOxg/P+BVDS+AWRZMEKPsD74o4wGyLUr2EudoA== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190224161753 20190217161753 49518 pki.gov. MLy5bgEBZm05letP9mutt3Yfdl/GG656+9LjQKuhiEFatTf0Dfjs5fBJNrWIjil3XvhQef4TV0pJ ChgFDiGiIzyd312CkOSNrQVm+c6KEkWWlu54nv9XE4duvX1eRuGTkeB8g81gX4c/cDkrUJafkHrF 7ALW6EKPgrCMd6KsG+MUSgGRAMMLO7JuIgkuOMQO8UBPqFQcy8PYfuqRY2j/Tw5KQc+s3VPzDIDJ a8X+ZBGi6yFXD+y4OnHneOFqxf9/M+eMCxhzx7L3fwQUzvOrqcJJScRbDRhKVmshYqS/HELLrSvS I6kFeaDZUIQ22sJ9uRfk8JmkKuereYTVdZEXdg== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190227051827 20190220051827 37818 pki.gov. xk3jAiomwDMUb0xRYmwlGUHyDGDH/AeUjGY96pYpN1vxLFUAqjUWv5RdZIvcRELXx7DVGN5R40qQ MenAkkfEl5Lm+F+eTFtYxMVAw0ZZN2qKggmkts2jCS34HsL2EWTZT7TZntm1tHeL6ziCFxyToOB8 wEpVdYcFFlgV9qb+/1XvC874DVyWqH/gW0399qiKVsiCii5HhkVremq1zTHiOOIAABhJ4I/ex7a9 pDsMbaq15oZzxq1qzn3Xh9XkTn1oTTMOF7k9EW3d69sxBxGLAdWjXjvqlwFSiwASkD3KEcz+0SwB fL4AKL3v+nlozcz+ltZnoSaKWz8xjl1t+wGXQg== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190224161753 20190217161753 49518 pki.gov. XAxePZkN29s8kWQXg87WjreYHNHDY+h87uU0WpL5QbULs5eCAUEl0/+BhAG4YcKVak96qHLGgWoV B+JEn1fptJ46ItGFXb+6Mr/tjPc8eWGWpA0O+Hv4C1D+J3uT7D1YlGTUYHRqsDcwARtscVbNDjiT 1ACF5SdYT0/dGwT9UoQe03gvrzDvQi5PT3zNoTAodkWZk9D0XkD+Jz2uP7otF0aRu/MqbvsI4lQS A9WaLrJ+vLZrISrRePAcz9SsJNCNdOO4dT2zyKf/dQZnn0tkviot+Q8qkh54cJrIoDSvw6vzF2og ZDqhUAkNwi5gcvzuN9CUgqfQPVBl8fmeFM4EaA== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190227051827 20190220051827 37818 pki.gov. kIHngmuQzk9n9xzQ/Btlma+WiZV8grCGK69yrGZ8pAW9BSH4B1PvR4Zyj8fV9Kad4NM8f3QcG79J J+CZPz7sJ5T7LstVG5YaX5SFjnZjopUlV+q9fxqgghFGPM0YEKz1MMuOQAAlP8ygXhO0994AmJXr ynmNeK9V0UlAbsYWP5AcUh2/zXzMOUMrDGp7V8kLuWMUgru8yl/pMIGOKAB7v12RoTZO18pNaF1Z SObVwOFKJ+6fVbdY+9wMFw9GxsuLm3fytXemR23Fid2Gxqa6pBJl2In1B/YqA02wWTTVTJzxOlEi Cq0WQnI4gxo6IhkcCnQo6bxXFAGGFiYXDIJ3Aw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI.GOV for PKI.GOV/A
	Error querying dns2.PKI.GOV/2620:9b:c001:9300:22:0:0:30 for PKI.GOV/A: 'IPv6 transport disabled'
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 5488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190226075721 20190219075721 49518 pki.gov. yUxl96HtM85bmQtCExagFZwNjFpWsmpxJp6Wo3NdDZxUSyKsMZhJ9fx/npF15CTEDlZ0JXL4Se9Q U7Fe3f9vxikADklbG4kDR5HrDH2pEWCtR9tnJnfbYP5KyP9zDEsQRlLgqBw3xsEhqwV7WAfr1+bQ 2vjngOaacayhbjsjBNgVf34Un9M4rI6NnBztsDpVRJo7W9oayf37MOwOOaL4t2Fvk2zsl65/UaW5 L6KjdGGPNuadYiv9H9v5D7VU6O89ZtuU0OcECDMo8z0VteWSxU9McUzk8lMoZkib81SyTTNSVjXZ sJVaOkppkVPEv0id41vovsutXMDkwKHVgKT+Eg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190227021817 20190220021817 37818 pki.gov. lDCNuKiqMEc+7OEWH5ufuYv4GQDK4L9YfXsQzD/oOEH04Au0a+HIYnVCssR0Dy1fIiMs8srAJ32c +lVmF4VRJ+mfZz80RUrPaqD1R6xtbisM7lnyNt2kqmxphRuKOKD3QSv/2ELPFzhdybIXG1HOoszT V/+G9NjgW775rgBZYZ4TiynHT7TQdrfL9wqUPVyMoWbRKQHVs9aMFW8lj3CZQJxinpet212fkeCq Un4SMXtqsi/6eJXjeA5HcEOw0ecpYvku9Vp/vif7yTNzPgLW4UGFj3B03JaOSkUSV2GAYm7dL33w I9ykJmD357slBJ8uXEe60nZx3Jub2RYFd2wmsA== ) k43dedsqu5e9ingout44oelna78o1bbn.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 4dbc0919bcb5b4ed k43dedsqu5e9ingout44oelna78o1bbo NS SOA RRSIG DNSKEY NSEC3PARAM ) k43dedsqu5e9ingout44oelna78o1bbn.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190226075721 20190219075721 49518 pki.gov. MVJ5P370YVpQglIsYqJ5LTZGfGHRbRxNuV9hE7Tr+uUdS7FatDyIgRQmHtO5jgLRTR/QOAl1f2Kw QAd9MXEXJXnuUK1HO3JeYCBb02mSqOHbs5VTYKXvfqvYWA+hHabOX4YhAYxao8dfJ+mEpuREpxCi gz4i+rWwa8iAgVytKVB+A/0/jxmnCAw/531oPZ/9dLx2koFLpHM8t7TECh/2BSqTfHpJ24ZR1ezx JUi8ptqBCN8nkmcYfTY4X2Kzgk1ZFOxiJQfSce4fAd3IpyoHJmMSkyyCxiCsTKmRNLqGZfLuqOhe SOu4qIYmqSwi2dA4nPmCnMSng+oepAKwcCnPkA== ) k43dedsqu5e9ingout44oelna78o1bbn.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190227023019 20190220023019 37818 pki.gov. EXKGAWGH/DDsNuuojmK24ix+Fn+MAm4qHIrfzUVxnuz7bIu2N5fwvEwvrCQrhYEWrL32QhRdoPlf y65PUfYaJwXkgOu28gqN+VHj4boTRd4caWzGE+x/9U8jwaH85IaYIfZHR2ksxiUX1QnxNTGkioIC AS/0A82ixbRlat5FW0umTJsHojQVZ2pnKUoKSJEe+xthQm/Fjql1WgVUs59g5AhzcI7P9pm2rR2I 5y0INZHDrH2wXYBL2i2JDFyuZRyWB3UloaQKW30cd/xkWUkn0zuiTErnh9T2KflTmv7eayWKkz9p xcwnaQqIqeTRG/l0BqzYxwxxUTqvTLVvLunEIA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190226072914 20190219072914 49518 pki.gov. noo4kh4zkQsaMnMzcRMg1D0/eSVVEE+KZIntZ9EwAYliVpgMGST+ZPhlqNChDaUVhCsoELFRisuB k/xEJqfOqT6zbXDs+RCPP0vAZ8GE/5OjSPxjBptYo3Z+SJFo4HtsQBBfyqYeHQOiJ4c3janDHEqj RCxJK69+CRAoOmkKVHTmJKIaMoZ9qjaWbx8QyO0ct4bL1dv2TMEPj4heHZQScJsjUQS3tfpKCnlV Y1de6nWjbDh/YwCHUX8h4qU9UsssLuhzCQikLyxpk8vd/lMPN5At00KfF38V1JjtIDIcAFUk0/Ov u6iO9YLOVPo4xididMPuuiPeDj6xJ7x/wxJqAg== )`
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190227013118 20190220013118 37818 pki.gov. lJ1zGSmcrn0FQFFRMV/ly2X/RwjPrVBzoPPNQca1bHzZCb1L02UtxigGcDXmvCjpN1e+/KtRxzIq ZPoragh1vrw56pyiQE0mU9lc3NhfW8L1LZW4NTGJMA/Eegoh8sNjssRrNhDs8hnvkGyiJ4ZMuaok xeZUybdl97w+8UjqbhChErXEk1A6LnYxnKGYAdDvzBe/jlwu/CBz5F7djE59MktfhOIDnW2Yew7s rP/rLA+JBRDA7axPx02JS83tQT9hPr0KwQcEDlTe8oWz2+m+6eSDmvmkbARCMqF1jd+ZPGId88jg pbdKBuMPmhkpNqEdT7pLk2J8BVkkJYaj4XdaYw== )`
	RRSIG=49518 and DNSKEY=49518 verifies the SOA RRset
	RRSIG=37818 and DNSKEY=37818 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: